Sentinel NWS Industry Days Slides V2_SAMpost.pdf

MALMSTROM AIR FORCE BASE

INDUSTRY DAYS

SEATTLE DISTRICT

SENTINEL OVERVIEW

13 JANUARY 2026

Commander's Greeting

• Exchanges during this event are considered informational only and are subject to change throughout the acquisition process/phases. Formalized information will be provided with any future Requests for Proposal (RFP)/Solicitation issuance.

• Recording/Photography of this event is strictly prohibited.

• Attendee list and slide deck will be provided via Sam.gov notice following this event.

• Questions must be submitted in writing using the note cards provided and will be answered during Q&A

Rules of Engagement

Sentinel Overview

• History

• Upgrade

• Lines of Effort

Relationship to Seattle District

• MILCON Area of Responsibility (AOR)

• Sentinel Projects

Acquisition Strategy

Small Business

Other Opportunities

• Non-Traditional MILCON Projects

APEX Accelerator

Questions

• Base Access Process and Common Questions

AGENDA

Sentinel Overview – History Minuteman (MM) weapon system is 64 years old; 40 years beyond designed life Though still effective, MMIII faces extensive challenges

• Age-out and Attrition

• Sustainability

• Does not meet capability requirements for flexibility, safety, and security

Recapitalization of the US ICBM fleet

• Congress authorized Air Force to procure and deploy the Sentinel weapon system MMIII Transition

• Must ensure seamless transition from MMIII to Sentinel

• The drawdown schedule of MMIII will mirror the deployment schedule of

Sentinel, ensuring no gap in capability

• To maintain the overall nuclear deterrent mission, it is essential to execute a comprehensive Minuteman III-to-Sentinel transition strategy that synergizes Minuteman III transition with Sentinel deployment without disrupting the ability of keeping 400 ICBMs on alert 24/7/365 per USSTRATCOM requirement(s).

Sentinel Overview – Upgrade

Total System Replacement of Minuteman III—must operate through 2075

• New missile system & weapon system command and control

Major Defense Acquisition Program

• $86B acquisition program through 2036 with sustainment beyond 2075

• MEGA-project: develop – transition – dual-operations – production – sustainment

Safe, Secure, Effective AND Affordable System

• Pursue low risk, technically mature baseline design

• Develop flexible system architecture with options for on-ramps/off-ramps

Scope of Sentinel Non-Traditional MILCON

• Conversion & Replacement of ~450 Launch Silos (LS)

• ~24 Launch Centers (LC)

• Construct roughly 1,700 miles of Missile Field Utility Corridors (per wing)

Scope of Sentinel Traditional MILCON

• Construct 79 supporting facilities totaling $2.44B

Endstate

• Time-certain delivery of Sentinel Weapon System Deployment

• Delivery of Real Property and MILCON projects that are sustainable for the life of the

Sentinel weapon system

• Recapitalization of the US ICBM fleet

Sentinel Funds: Sentinel Real Property and weapons system funded through MILCON 3300, RDT&E 3600, Missile Procurement-Air Force 3020, and O&M 3400

Traditional MILCON: All MILCON projects in support of the Sentinel program. These projects include support facility projects at Sentinel testing, training, and operational installations

MILCON funded Utility Corridors at FEW/Malmstrom AFBs.

RDT&E Funded Test Launch Center (LC) and Launch Silo (LS): At Vandenberg AFB, Dugway Proving Ground, and Hill AFB, the Test LC and LSs constructed under authorities granted with RDT&E funds (Northrup Grumman Work)

Facility Sustainment, Repair, or Modernization (FSRM) projects: FSRM projects directly funded in support of Sentinel deployment. These include the Contractor Support Area (CSA) facility modifications at Vandenberg and any other FSRM requirements directly supporting Sentinel.

Real Estate Acquisitions: All Real Estate acquisitions required ISO of Sentinel deployment

Lines of Effort

Weapon System Structure (Northrup Grumman) Communications Support Bldgs. (CSBs) (~$10.8M) LC Conversions (~$303M) LS Conversions (~$1.99B)

Operational LCs, LSs, CSBs, and Infrastructure funded w/ MILCON 3300 and Missile Procurement- Air Force 3020

Design and Construction Support at Sentinel Operational Wings (F.E.

Warren, Minot, and Malmstrom) Design engineer review support of standard and site-specific designs Discipline specific input on deliverable (plans and specifications, meeting(s) and reviews, and other support as necessary) Construction contract administration and oversight TBD

Non-Traditional MILCON MAFB

Seattle District MILCON Area of Responsibility Boundaries

Sentinel Overview – Locations

Infrastructure Improvements (INF) ~ 3rd Qtr FY27 Award

Consolidated Maintenance Facility (CMF) ~ 4th Qtr FY27 Award

Integrated Training Center (ITC) ~ 2nd Qtr FY28 Award

Missile Handling Complex (MHC) ~ 3rd Qtr FY28 Award

Integrated Command Center (ICC) ~ 3rd Qtr FY29 Award

RELATED/FUTURE OPPORTUNITIES

• Construction Management Services

• Operations Group Facility (OGF)

• Utility Corridors (UC)

NWS Area of Operation MILCON Sentinel Projects

FY27 Infrastructure Improvements $140M-$160M GOAL: Deliver a resilient, modern, and scalable utility backbone for the Sentinel Program at Malmstrom AFB.

KEY PROJECT OBJECTIVES

Achieve Mission Resiliency

• Engineer and construct robust power and water systems to ensure uninterrupted, redundant support for all mission-critical operations.

Execute a Full-Scale Modernization

• Replace aging and undersized infrastructure with high-quality, modern systems built for decades of reliable service.

Enable Future Growth

• Build scalable systems and utility corridors with the capacity to support all currently planned facilities and accommodate future mission expansion.

PRIMARY SCOPE OF WORK

Potable Water System

• Build a new, high-capacity water supply system, including a ~2.5-million-gallon storage tank, a modern pumphouse, and all associated distribution lines.

Electrical Infrastructure

• Establishment of a redundant power grid through the construction of a new 115kV substation and the installation of a network of overhead and underground distribution lines.

Site & Corridor Development

• The extension and establishment of new, consolidated utility corridors to safely house and provide access to all essential services for new and future Sentinel facilities.

FY27 Consolidated Maintenance Facility (CMF) $300M-$355M GOAL: Build a modern consolidated maintenance facility at Malmstrom AFB to centralize repair functions, support the Sentinel missile system, and enhance operational readiness.

KEY PROJECT OBJECTIVES

Consolidate & Centralize Operations

• Unify currently dispersed maintenance and support activities into a single, modern, and efficient facility to streamline workflows and enhance operational readiness.

Modernize Maintenance Capabilities

• Provide a purpose-built environment with the specialized infrastructure, equipment, and space required to support the advanced Sentinel missile system.

Enhance Safety & Security

• Construct a secure facility that meets all DoD and Air Force standards, ensuring a safe and controlled environment for personnel, equipment, and mission-critical operations.

Drilled pier and grade beam foundation system.

PRIMARY SCOPE OF WORK

Vehicle & Equipment Maintenance Bays

• Construction of large, open-bay work areas specifically designed for the maintenance and repair of missile transporters, support vehicles, and related heavy equipment.

Specialized Support Shops & Labs

• Development of dedicated workshops for component repair, fabrication, electronics, and other specialized maintenance functions essential to the Sentinel system.

Facility Support & Site Infrastructure

• Construction of integrated administrative offices and personnel support areas, along with full site preparation including utilities, roadways, and security infrastructure.

FY27 Integrated Training Center (ITC) $135M-$160M GOAL: Build a consolidated facility with office and collaboration space for maintenance and training systems to support the Sentinel missile mission and improve operational readiness at Malmstrom AFB.

KEY PROJECT OBJECTIVES

Consolidate space for office, maintenance and training devices

• Provide centralized, comprehensive training that prepares mission-ready Airmen to operate, maintain and support the sentinel missile system.

Enhance Safety & Security

• Build a secure facility that meets all DoD and

Air Force standards, ensuring a safe and controlled environment for personnel, equipment, and mission-critical operations.

Drilled pier and grade beam foundation system.

PRIMARY SCOPE OF WORK

Operations, maintenance, storage and Classroom spaces

• Build maintenance and operations training facility with large classroom, high-bay and single-story technical training labs and shops.

Specialized Support Shops & Labs and storage

• Dedicated shops for maintaining simulators and training devices. Technical labs for system, avionics and work that allow hand-on practice with operational hardware and software. Support spaces for training devices, test equipment and technical personnel who sustain the training system's readiness.

Facility Support & Site Infrastructure

• Build administrative offices along with full site

FY27 Missile Handling Complex (MHC) $110M-$130M GOAL: Build MHC with Missile Handling Facilities (for missile storage), TSAF, site improvements, utilities, road upgrades, and two outdoor pads

KEY PROJECT OBJECTIVES

Foundation System

• The soil in this location is determined to be expansive in nature.

• A concrete structural slab and grade beam foundation supported on drilled piers is the designed foundation system.

Challenges of construction in Great Falls, MT to include winter weather.

Enhance Safety & Security

• Construct a secure facility that meets all

DoD and Air Force standards, ensuring a safe and controlled environment for personnel, equipment, and mission-critical operations.

PRIMARY SCOPE OF WORK

Missile Handing Facility (MHF)

• The MHF consists of 3 Missile Bays and 3 Trailer Bays. The three Trailer Bays will be used to facilitate the loading and unloading of assets to the three Missile Bays. Other rooms will serve as support to the MHF to include Staging and Equipment Areas, other support areas such as Mechanical, Electrical, Communication Rooms.

Transporter Storage and Administration Facility

(TSAF)

• The TSAF consists of 6 Transport Bays used for missile transporter vehicle storage.

Administrative functions will be housed within the TSAF to support both MHC facilities. The remaining rooms will serve as support for the TSAF to include Equipment Storage, other support areas such as Mechanical, Electrical, Communications Rooms.

FY27 Integrated Command Center (ICC) $144M-$170M GOAL: Build an ICD 705-compliant ICC with emergency power and protections against direct hostile threats, HEMP, and CBRN hazards to ensure continuous 24-hour operations and survivability.

KEY PROJECT OBJECTIVES

Command and Control

• Provide 24/7 secure real-time data, audio and video to Watch Cmdr and interconnectivity with Senior Leadership

• Provide real-time analysis for force tracking, alert status, and Wx

• Centralize the monitoring of cyber security, physical security, operations, and maintenance activities at missile field sites.

Enhance Safety & Security

• Construct a secure facility that meets all DoD and Air Force standards, ensuring a safe and controlled environment for personnel, equipment, and mission-critical operations.

Survivability: Continuous Operation during catastrophic events.

Drilled pier and grade beam foundation system.

PRIMARY SCOPE OF WORK

Missile Operations Building

• Build secure and unclassified areas consisting of an operations floor, conference rooms, administrative areas, communications equipment, and storage areas.

Secure Areas

• Build/construct areas designed to ICD 705 technical specifications.

Facility Mitigation Measures

• Construct facility to counter direct hostile threats.

• Construct facility to counter High-altitude Electromagnetic Pulse (HEMP) events.

• Construct facility to counter Chemical/Biological threats.

Acquisition Strategy

Acquisition Strategy

• Acquisition Strategy: Acquisition Planning is still underway for all projects. CMF and Infrastructure projects are anticipated to be Full and Open Competitive procurements.

• Best Value Continuum Method: Anticipated to be Best Value Trade-Off.

• Type of Contracts: Design-Bid-Build, Firm Fixed Price, Stand-alone Construction Contracts

• Notices relating to these projects will be posted on the System of Award Management (https://sam.gov/).

• Future Pre-Solicitation Notices, Special Notices, and Requests for Proposal (RFPs) will be posted on SAM.gov with links to access the RFP documents via PIEE (https://piee.eb.mil/).

SAM.gov, Procurement Integrated Enterprise Environment (PIEE)

Anticipated Key Contract Clauses

• FAR 52.211-10: Commencement, Prosecution, and Completion of Work

• FAR 52.211-12: Liquidated Damages- Construction

• FAR 52.228-1: Bid Guarantee

• FAR 52.228-15: Performance and Payment Bonds-Construction

• FAR 52.228-5: Insurance-Work on a Government Installation

• DFARS 252.232-7007: Limitation of Government’s Obligation

• FAR 52.211-15: Defense Priority and Allocation Requirements

There are two levels of priority ratings under the DPAS, which dictate the order of precedence:

• DO Rating = Critical to national defense (All DO rated orders have equal priority and take preference over unrated orders)

• DX Rating = Highest national defense urgency (All DX rated orders have equal priority and take preference over DO rated and unrated orders)

Sentinel Ground Based Strategic Deterrent Program has been designated DX priority rating.

Defense Priorities and Allocations System (DPAS)

(15 CFR 700)

Mandatory Acceptance and Scheduling:

U.S. companies are generally required by law to accept rated orders and provide preferential scheduling if necessary to meet required delivery date(s).

Flow Down Requirements:

Rating levels “flow down” to EVERY LEVEL of supplier under a rated order. Prime contractors are REQUIRED to ensure that every supplier in their supply chain receives the rating and fully understands their requirements under DPAS.

Defense Priorities and Allocations System (DPAS)

(15 CFR 700)

Project Labor Agreements (PLAs)

• Determinations on whether to include PLAs have yet to be completed/decided. USACE is still considering feedback/market research regarding PLAs to make its determinations.

• PLA Market Survey Questions have been added to the end of this slide presentation for reference. Should you have any additional feedback to provide for a specific project, please submit PLA Market Survey responses/feedback to kyla.m.couch@usace.army.mil.

Small Business

USACE NWS OFFICE OF SMALL BUSINESS PROGRAMS

General Advice

Get engaged, EARLY

O Understand anticipated SB involvement (if applicable) o Small Business Commitment Document o Subcontracting Plan – USACE goals are based on historical data, market research o Utilize SAM.gov and FPDS, USASpending.gov for subcontracting opportunities

Build relationships, NOW

O SBA Sub Net – https://subnet.sba.gov/client/dsp_Landing.cfm

O FPDS - https://www.fpds.gov/fpdsng_cms/index.php/en/

O Request agency info on recent awards with a subcontracting plan

O Request assistance to source SBs (utilize your APEX Accelerators)

Understand other than small contractor responsibilities under FAR 52.219-9 o Good Faith Efforts (FAR 19.705-7)

O eSRS reporting requirements (now on SAM.gov)

USACE NWS OFFICE OF SMALL BUSINESS PROGRAMS

Enshané Nomoto

Deputy, Small Business Programs

Enshane.Nomoto@usace.army.mil

• (best initial contact method)

• Tel: 206-316-3990

USACE NWS SB Homepage:

• https://www.nws.usace.army.mil/Business-With-Us/Small-Business/

USACE NWS Business Opportunity Branch (BOB):

• dll-cenws-ctb@usace.army.mil

Related / Future Opportunities

FY28 Operations Group Facility (MILCON) GOAL: Build a consolidated, ICD-705–compliant facility providing office and collaboration space for the Wing Operations Group and Missile Squadrons, integrating MAFFO (Food OPS), MAF Supply, and linen exchange to improve operational efficiency.

KEY PROJECT OBJECTIVES

Office and collaboration space

• Provide office and collaboration space that integrates planning and operations, strengthens span of control, interaction, collaboration, and efficiency in daily activities.

Enable Future Growth

• Provide adequate space for GBSA Squadron

Operations to consolidate planning and mission activities into a single facility. This replaces multiple substandard, scattered locations that hindered coordination and failed to meet mission requirement.

PRIMARY SCOPE OF WORK

Office and collaboration space

• Provides consolidated facility consisting of an operations group headquarters along with a MAFFO/MAFS warehouse function with vehicle loading bay.

• Administrative and office spaces supporting missile crew members mission in the field.

Mission planning and dispatch.

Site Infrastructure & Facility Support

• Construction of consolidated office and collaboration spaces, along with full site

FY29 Utility Corridor (MILCON) GOAL: Build secure utility corridors at Malmstrom AFB, Montana, linking all Sentinel silos, launch control centers, and Wing Command Center to provide power, fiber-optics, and communications for the 341st Missile Wing and reliable Sentinel operations.

KEY PROJECT OBJECTIVES

Command and Control

• Provide secure, redundant command, control, and communications (C3) connectivity across the 341st Missile Wing.

• Deliver essential power, fiber-optic, hardened communications, and support utilities to all Sentinel silos, launch control centers, and Wing Command Center.

Environmental Impact

• Support infrastructure upgrades while minimizing new land use (~1,277 miles new corridors + reuse of existing).

• Comply with DoD permanent construction, antiterrorism/force protection, and environmental standards.

PRIMARY SCOPE OF WORK

Civil Work

• Trenching for burying conduits and cables;

directional boring/horizontal drilling under roadways, rivers, railways, and obstacles to minimize surface disruption.

• Placing hardened conduits, pull vaults, and manholes for cable access and protection.

• Purchase and install fiber-optic cables and hardened communications media to provide secure, redundant C3 connectivity and support digital command-and-control upgrades.

Site Restoration and Compliance

• Restore disturbed land to pre-construction condition where feasible; ensure compliance with DoD UFC 1-200-01 (permanent construction), UFC 4-010-01 (antiterrorism/force protection).

USACE SENTINEL PROGRAM

Prepared For: Malmstrom Industry Day

Prepared By: Sentinel Integrated Program Management Office, Northwestern Division, USACE

January 13, 2026

LGM-35A SENTINEL PROGRAM

SENTINEL MILCON PROJECT SUMMARY

Project NameBaseFY Mission Integration Facility***Hill20

Software Sustainment Center**Hill21 Technology and Collaboration Center**Hill23

Wing Command Center**FEW23 Missile Handling Complex**FEW23 Integrated Training CenterFEW26

Consolidated Maintenance FacilityFEW26 Sentinel Commercial Gate Entrance Control FacilitiesMalm26

Utility CorridorFEW26 Operations Group FacilityFEW27

SENTINEL MILCON PROJECT SUMMARY (1 / 2)*

FEW = F.E. Warren AFB Malm = Malmstrom AFB Minot = Minot AFB *Current Working Model **Projects Underway ***Projects Complete

Project NameBaseFY Wing Command CenterMalm27

Missile Handling ComplexMalm27 Consolidated Maintenance FacilityMalm27

Consolidated Maintenance Facility InfrastructureMalm27 Integrated Training CenterMalm27 Operational Group FacilityMalm28

Utility Corridor MalmTBD Consolidated Vehicle Maintenance FacilityMinotTBD

Security Forces ComplexMinotTBD Commercial Gate Entrance Control FacilitiesMinotTBD

SENTINEL MILCON PROJECT SUMMARY (2 / 2)*

FEW = F.E. Warren AFB Malm = Malmstrom AFB Minot = Minot AFB *Current Working Model **Projects Underway ***Projects Complete

$249M SENTINEL CMS SOLICITATION

• Pre-Solicitation Notice ID: TBD

• Product Service Code: C219 – ARCHITECT AND ENGINEERING – GENERAL: OTHER

• NAICS Code: 541330 – Engineering Services

• *Non-Brooks Act (Selection of Architects and Engineers (A-E) statute)

• Solicitation – Unrestricted, firm-fixed-price (FFP) Indefinite Deliver Contracts (IDCs) (i.e., Multiple-Award Task Order Contract (MATOC), total (shared) capacity $249M

• Target Award up to four (4) firms

• Scope: IDCs will include projects primarily for construction management service staff augmentation in support of the Sentinel Program

• Task Orders under the MATOC will be limited to FFP

• Period of Performance. Seven (7)-years performance (base period of five (5)-years, and one two-year option period)

• Solicitation Date: Tentative 3rd Quarter, FY 2026

• Award Date: Tentative 1st Quarter, FY 2027

ADDITIONAL INFORMATION ON SENTINEL

Air Force Global Strike Command https://www.afgsc.af.mil/Sentinel-GBSD/

Air Force Nuclear Weapons Center https://www.afnwc.af.mil/Weapon-Systems/Sentinel-ICBM-LGM-35A/

Northrop Grumman Website:

https://www.northropgrumman.com/space/sentinel

Traditional Opportunities:

https://sam.gov/

Industry Day - Ground Based Strategic Deterrent Utility Corridor, Francis E. Warren Air Force Base, Wyoming https://sam.gov/opp/ea7b8a83bee9455f8d05bbaca7f0e97c/view

ADDITIONAL INFORMATION ON SENTINEL

CMMC/APEX Introduction The Sentinel program currently has Uncontrolled Unclassified Information

(UUI), Controlled Unclassified Information (CUI), and Classified Information.

Project-specific classification levels, CMMC requirements, and other security related requirements, such as ICD 705, will be specified in each solicitation documents, drawings and specifications.

Most Sentinel projects are anticipated to be CMMC level 2 (see Q&A), however project-specific classification levels and CMMC requirements have not been fully determined at this time.

Cybersecurity Maturity Model Certification (CMMC)

• Effective 10 Nov 2025

• Official Department of War (DoW) Chief Information Officer (CIO) website:

https://dodcio.defense.gov/CMMC/

• FAQ

• Resources

Mark Johnson, Government Contracting Advisor, APEX Accelerator presenter

CMMC 101

Washington APEX Accelerator

Presenter: Mark Johnson January 13, 2026

This APEX Accelerator is funded in part through a cooperative agreement with the Department of Defense.

About the Presenter Mark Johnson – Government Contracting Advisor with Washington APEX Accelerator at Economic Alliance of Snohomish County. Mark has his BA in Public Policy from the University of Washington.

Before APEX, Mark worked in state and local government, and consulted a county government on program development

Prior to his time in the public sector, Mark developed his skillset working for small businesses. His experience seeded a passion for helping small businesses grow, helping communities thrive through economic empowerment and skill development.

Link to register: Client Sign-Up – Montana APEX Accelerator

Phone: (406) 256-6871 Email: apex@bigskyeda.org

WA APEX Sponsors and Supporters

What is CMMC?

• CMMC = Cybersecurity Maturity Model Certification

• Department of Defense

• Sets cybersecurity standards for contractors and subcontractors doing business with the DoD on how to properly handle ‘protected information’

What is Protected Information

• Federal Contract Information (FCI) – any information flowing in and out of a business related to a DoD contract EXCEPT invoices

• Controlled Unclassified Information, Controlled Technical Information, and Covered Defense Information (CUI, CTI, or CDI) – sensitive government information including technical drawings, blueprints, export-controlled data, etc.

Why does CMMC exist?

• Defense contractors have been targeted by cyberattacks

– especially tier 2 and beyond.

• The DoD needed a way to verify that companies are following cybersecurity rules (not just promising they do).

• CMMC provides a framework with tiers of cybersecurity requirements, aligned with NIST 800-171 standards.

Who Does CMMC Apply to?

All primes, subcontractors and suppliers contracting with the Department of Defense excluding…

• Businesses selling Commercially Off the Shelf Items (COTS) without modifications

• Contracts under the micro-purchase threshold of $15k

What is the Framework?

Level 1 – Foundational (15 security requirements)

• Basic cybersecurity practices (like antivirus, firewalls, secure passwords).

• Applies to contractors that only handle FCI.

• Requires an annual self-assessment.

Level 2 – Advanced (110 security requirements)

• Based on NIST SP 800-171

• Applies to contractors handling CUI.

• Requires either self-assessment or third-party certification, depending on the sensitivity of the work.

Level 3 – Expert

• Based on NIST SP 800-172 (enhanced practices).

• Applies to the most sensitive programs.

• Requires a government-led assessment.

Implementation Timeline?

Level 1 vs Level 2 Level 3 will most likely be reserved for large players in the defense space and consists of government led assessments.

Level 1

• 15 Controls – 17 practices

• 59 Objectives

• 6 Families

• Attestation of compliance – not certification

• May be able to handle internally if tech savvy

Level 2

• 110 Controls

• 320 Objectives

• 14 Families (including 6 in level 1)

• Certification – Certified Third Party

Assessor Organization (C3PAO) can certify you as compliant, the self-certification process is similar to level 1 as an attestation

• Will most likely need to hire trained IT staff or hire a CMMC certified Managed Service Provider

SPRS – Self Certify The Supplier Performance Risk System (SPRS) is an application housed in the Procurement Integrated Enterprise Environment (PIEE) system. This is where you upload both your level 1 attestation and level 2 self-certify attestation.

Level 1: Attest that you meet complete compliance Level 2: Record compliance family by family (Met, Not Met, N/A) – Affirm results

If handling CUI, you will need to be both compliant with level 1 and certified at level 2 (self or C3PAO) – If you handle CUI, you will be handling

FCI

Steps to Becoming CMMC Level 1 Compliant

Challenges for Businesses

- Many Small and Medium Size Businesses handling Federal Contract Information (FCI) don’t know where to begin with cybersecurity compliance

- FAR 52.204-21 requirements are complex

- Limited time and resources make it difficult to build a compliant cybersecurity program

STEP 1

- Identify whether you handle Federal Contract Information (FCI)

- If your contract includes FAR 52.204-21 or DFARS 252.204-7024, you must protect FCI

STEP 2 – SCOPE/INVENTORY

- Identify the systems, people & locations that store, process or transmit FCI

- Conduct a comprehensive inventory

- If possible, exclude unrelated systems to minimize compliance scope (good for small businesses)

STEP 3 – FAR 17 Controls Self-Assessment

- Understand the controls need to meet

Control Categories Example PracticesDomain

Limit access to authorized users; control use of removable media.Access Control (AC)

Require unique user IDs and strong passwords.Identification & Authentication

(IA)

Properly sanitize or destroy FCI media before disposal.Media Protection (MP)

Limit physical access to systems and devices.Physical Protection (PE)

Protect information during transmission; maintain secure connections.

System & Communications Protection (SC)

Update software, patch systems, and protect from malware.System Integrity (SI)

STEP 4 – Document Policies and Procedures

- Describe how your company will meet all controls by creating a System Security Plan (SSP)

- Who responsible for security

- How implementing each practice

- Screenshots, logs, and system settings

STEP 5 – Perform Self Assessment/Submit Results

- Submit into Supplier Performance Risk System (SPRS)

- There is no “score” for CMMC Level 1 Self Assessment

- Must meet all controls or safeguards at 100%

- This must be reported annually

Resources to Help with CMMC Level 1 Compliance

DOD’s Project Spectrum offers free tools for gap analysis

APEX Accelerator offering a CMMC Level 1 Readiness Workshop Series

- Sessions offered in January, February, & March 2026

CMMC Level 1 Workshop Series

- Partnership: Washington APEX + Totem.Tech + Govology

- Short, hands-on online workshops

- Target audience: SMBs in the Government Industrial Base (GIB) & Defense Industrial Base (DIB)

What You’ll Learn

What You’ll Accomplish

- Start building a System Security Plan (SSP)

- Implement protections for FCI per FAR 52.204-21

- Conduct a CMMC Level 1 self-assessment

- Become "GIB Ready" or "DIB Ready"

- Prepare for eventual CMMC Level 2 certification, if applicable

Learning Outcomes

- Understand federal contractor cybersecurity requirements

- Develop your System Security Plan (SSP) "blueprint"

- Learn DoD self-assessment and reporting methods

How It Works

- Watch On Demand Tutorials (1.5 hours each), recommended at beginning of the week

- Review additional training materials – Workbook, PowerPoints

- Attend weekly live Q&A sessions (1 hour each, Fridays), from 8am – 9am PT

What You’ll Receive

- e-Workbook

- Access to Totem Cybersecurity Compliance Management Tool

- SSP Template & Policy Templates

- Weekly Q&A support

Get Ready for Success

- Inventory of user accounts, hardware, software Here is a good article by Totem Tech about that

- Totem template accessed here*

*You will see references to CUI (Controlled Unclassified Information) which is tied to CMMC Leve 2.

However, you can use the template as a guide to inventory your hardware and software for CMMC Level 1 which applies to FCI (Federal Controlled Information).

Attendee Requirements

- Documentation & system details

- Workstation with Internet

- An open and curious mindset!

Instructor Contact Information Mark Johnson – markj@economicalliancesc.org Washington APEX Accelerator at Economic Alliance Snohomish County

February Cohort Link

Questions

MALMSTROM AFB ACCESS CONSIDERATIONS

Access Requirements are summarized in 01 14 00 Spec Section for each solicitation

• Contractor Entry Authorization List (CEAL) process

• 5-business day minimum processing time

• REAL ID Act of 2005 in effect – background check required

• Employees who clear the background check process will be issued passes/DBIDS cards by 341 SFS/S3V for one year – renewals required annually

• All vehicles subject to search

• Causes for denial of access include/not limited to:

terrorism, inability to verify identify, fraud, criminal history, outstanding warrants, prior felony convictions, narcotics charges, etc.

• Appeal process may be requested

• Additional access requirements for restricted areas

• Commercial Vehicle Access Restrictions – Monday to Friday, subject to search, must use certain entrances

• Force Protection Levels

• ECP closures due to drills and operational restrictions

What will the evaluation criteria/rating philosophy be?

Response: Evaluation criteria is still being developed and is subject to change. Anticipating the following factors:

• Past Performance

• Project Narrative/Summary Schedule

• Small Business Participation (For other than SB set-asides)

Best value tradeoff process is anticipated. Relative importance of factors is still to be determined.

Questions and Answers

What procurement vehicles/contract types will be used? Will projects be Design-Build (DB) or Design-Bid-Build (DBB)?

Response: Contracts for the construction of the Malmstrom AFB OMC projects (Infrastructure, CMF, ITC, MHC, and ICC) are anticipated to be stand-alone, Firm-Fixed Price, Design-Bid-Build, construction contracts.

What are the expected small business subcontracting goals?

Response: Anticipated goals are provided below. Actual goals will be issued with the individual project RFPs/solicitations. Note: Percentages below are based on total contract value dollars.

Questions and Answers

HUBZoneSDVOSBVOSBWOSBSDBSmall Business

Anticipated SB Goals

3%3%5%5%5%30%Infrastructure

2%3%5%5%10%30%CMF

TBDITC

TBDMHC

TBDICC

Will Project Labor Agreements (PLAs) be required?

Response: Determinations on whether to include a PLA are fact and project specific. The Government is considering all relevant market research and data.

What are the expected CMMC Level Requirements for each of the projects?

Response: All OMC projects are anticipated to be CMMC Level 2 or higher, final CMMC level certification requirements will be publicized with the future solicitations.

Supplemental Information

Market Survey Questions

1) Do you have knowledge that a PLA has been used in the local area on projects of this kind? If so, please provide supporting documentation.

2) Are you aware of skilled labor shortages in the area for those crafts that will be needed to complete the referenced project? If so, please elaborate and provide supporting documentation where possible.

3) Are you aware of time sensitive issues/scheduling requirements that would affect the rate at which the referenced project should be completed? If so, please elaborate and provide supporting documentation where possible

Market Survey Questions (continued)

4) Identify specific reasons why or how you believe a PLA would advance the Federal Government’s interest in achieving economy and efficiency in Federal procurement.

5) Identify specific reasons why you do not believe a PLA would advance the Federal Government’s interest in achieving economy and efficiency in Federal procurement.

6) Identify any additional information you believe the Government should take into consideration regarding the use of a PLA on the referenced project.

7) Does your company intend to bid/propose on this project if a PLA requirement is included in the solicitation? Does your company intend to bid/propose on this project if a PLA requirement is not included in the solicitation?

8) Does your company intend to bid/propose on this project if a PLA requirement is included in the solicitation? Does your company intend to bid/propose on this project if a PLA requirement is not included in the solicitation?

The information gathered for questions 1-8 listed above should include the following information on projects completed in the last 2-5 years (or other timeframe, as appropriate):

i. Project Name and Location

ii. Detailed Project Description

iii. Initial Cost Estimate vs. Actual Final Cost

iv. Was the project completed on time?

v. Number of craft trades present on the project.

vi. Was PLA used?

vii. Were there any challenges experienced during the project?